Am I being extremely thick here?
The evidence submitted by the FBI [1] shows the phpmyadmin page running on address 192.168.1.24. Are they claiming to have connected over the internet to a public facing RFC1918 address and it was routable?
(Saying that, I'm now realising that I could knock up a similar screenshot showing me connecting to any "real-world" IP address anyway; it seems to prove nothing.
[1] http://krebsonsecurity.com/wp-content/uploads/2014/10/70-8.p...